PT-2026-49802 · Google · Android

Published

2026-06-16

·

Updated

2026-06-16

·

CVE-2026-0144

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Fix

Buffer Overflow

Weakness Enumeration

Related Identifiers

CVE-2026-0144

Affected Products

Android